There was a relatively recent case of Bank of America deciding eight months later that it wasn't a fraud and clawing back their provisional refund. It turns out that the original card was intercepted in the mail and they simply issued a duplicate without preventing the use of the first, but it took the victim's attorneys to get the evidence from the bank, connect the dots and figure out this happened.